Skip to content

Privacy

Privacy policy

This site is made for you to get to know the house and talk to the host. Here is, in plain words, what happens to your personal data, under Brazil’s General Data Protection Law (LGPD, Law No. 13,709/2018).

Updated on 14 October 2026.

Who is responsible (controller)

The party responsible for processing your personal data is Ponta Negra Paradise House, represented by the host, Edu.

Channel for privacy questions and to exercise your rights: WhatsApp +55 84 99119-3173.

What data we collect and how

Messages and forms: the site builds a message with what you type (name, dates, number of guests, phone, email, message) and opens your WhatsApp. The site does not store this data: it only reaches us if you send the message.

Booking: when a booking is confirmed, we process the data needed for the rental agreement (identification, ID document, contact details and guest list, which may include children and teenagers).

During the stay: security cameras in outdoor areas of the property and in two restricted indoor areas (a storeroom and a utility room, which guests do not use), and the electronic lock at the entrance. Fingerprint access is optional and only happens at the guest’s own request.

Browsing: the provider that delivers the site (Cloudflare) records technical data such as IP address and browser type.

What we use the data for, on what basis and for how long

Each purpose has its legal basis (LGPD, arts. 7 and 11) and its retention period.

  • Messages sent on WhatsApp (name, phone, email, dates, message)

    Purpose
    Reply, send availability and a quote
    Legal basis
    Pre-contractual steps at the data subject’s request (art. 7, V)
    Retention
    Up to 12 months after the last contact, if there is no booking
  • Booking and agreement data (identification, ID document, contact, guests)

    Purpose
    Draft and perform the rental agreement, charge and account for payments
    Legal basis
    Contract performance (art. 7, V), legal obligation (art. 7, II) and regular exercise of rights (art. 7, VI)
    Retention
    During the stay and up to 5 years afterwards, for legal obligations and any defence in disputes
  • Security camera images and lock records

    Purpose
    Safety of people and the property
    Legal basis
    Legitimate interest (art. 7, IX)
    Retention
    Up to 15 days
  • Fingerprint, only if the guest asks

    Purpose
    Access to the property during the stay
    Legal basis
    Specific consent (art. 11, I)
    Retention
    Deleted or deactivated at the end of the stay
  • Technical browsing data (IP, browser)

    Purpose
    Security and operation of the site
    Legal basis
    Legitimate interest (art. 7, IX)
    Retention
    As per the provider’s temporary logs
  • Data exchanged with the Google map, only if you click

    Purpose
    Show the area map
    Legal basis
    Consent, by clicking (art. 7, I)
    Retention
    As per Google’s policy

Who we share it with

With providers that make the site and our service work: WhatsApp (Meta), Cloudflare (hosting and security) and, if you open the map, Google. If you accept statistics or marketing cookies, also Google (Tag Manager, Analytics and Ads), Microsoft (Clarity) and Meta.

The platforms where the house is listed (Airbnb, Vrbo and Expedia) process the data of people who book through them, under their own policies.

With authorities, when required by law or a court order. We do not sell personal data.

Transfers outside Brazil

Some of these services use servers in other countries. When that happens, we rely on providers that state they apply protection measures compatible with the LGPD (art. 33).

Cookies

The site only uses the storage needed to work and to remember your cookie choice. Statistics and marketing cookies are turned on only if you accept in the notice shown on your first visit. Rejecting is as prominent as accepting, and you can change your choice at any time under “Cookie preferences” in the footer.

Statistics (with your consent): Google Analytics and Microsoft Clarity, through Google Tag Manager. They measure pages visited, clicks and how the site is used. Clarity may record the browsing session, with form fields masked.

Marketing (with your consent): ad measurement and remarketing from Google Ads and Meta, when active. They let us evaluate campaigns and show the house to people who already visited the site.

Without your consent, no script from Google, Microsoft or Meta is loaded. We count visits in aggregate and without cookies through Cloudflare Web Analytics. The Google map only loads after you click “Show interactive map”, and Google may set cookies at that point.

Your rights and how to exercise them

At any time and free of charge, you may ask for: confirmation that we process your data; access; correction; anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law; portability; information about who we share data with; information about the option not to consent and its consequences; and withdrawal of consent (LGPD, art. 18).

How to ask: on WhatsApp +55 84 99119-3173. We reply within 15 days. We may ask you to confirm your identity to protect your data.

If you believe your rights were not respected, you may complain to Brazil’s National Data Protection Authority (ANPD): www.gov.br/anpd.

Security

We adopt technical and administrative measures to protect data, such as a secure connection (HTTPS), restricted access to messages and documents, and keeping contract documents only for as long as needed. No system is completely secure: if an incident could cause relevant risk or harm, we will notify the people affected and the ANPD, as the law requires.

Children and teenagers

Data about children and teenagers (for example, names on the guest list) is only processed when provided by parents or guardians, in the minor’s best interest and for the booking and the safety of the stay.

Changes to this policy

We may update this policy. The date of the last update is shown at the top of the page, and important changes will be announced here.